socreg - asset registration portal

How Do I Update My Socreg Profile Settings?

To change your profile settings in Socreg, log in and click your name in the top bar and then click ‘Settings’. Current options are:

Receive Release Email - this toggles whether or not you would like to receive the Socreg release notifications.

Note: This setting is different than the ‘...

Socreg Releases

As new software releases are deployed and the Socreg application is updated, information about the software releases is posted to the Socreg Releases Google Doc (CAS Authentication required to access).

Release information is also sent to admin membership of unit Security Contacts.

I've received an "IP address to transfer" message.

Here we explain what it means and what you need to do.

You've received the message because Socreg has encountered a mismatch between the security contact that claimed an IP address (individually or by subnet) and the security contact that registered a subdomain.

(Note: In Socreg the assignment of a subdomain enables the transfer of IP address responsibility to the right party, but does not assign security contact responsibility).

For example, if security contact A registers a subdomain xyz.berkeley.edu and another security contact B claims subnet a.b.c.0/24 and there is a set of hostnames defined...

How are security notices routed?

Security notices are routed based on the registration information in Socreg.

For example, if an IP address has a registered Security Contact, the security notice is sent to that Security Contact, but if there is no specific IP address registration, then the notice is sent to the Security Contact that registered the subnet that contains the IP Address. Notices will also be sent to:

The registrant Security Contact’s Service Provider, if any.

The registrant Security Contact’s Departmental...

Why can’t two Security Contacts share the same subnet? We both have IP addresses on the subnet.

Overlap is not allowed in Socreg. If two departments share a subnet, the department who claims the most IP addresses for that subnet will get the entire subnet. The other department will get individual IP addresses.

Additionally, one Security Contact will register and be primarily responsible for an IP address, although other Security Contacts may also receive security notices for that IP address.

For complicated situations, e.g., where two different groups are responsible for systems on a subnet, a Security...

What are the types of email generated by Socreg? Can I opt out from receiving any/all of them?

There are three types of email generated by Socreg:

FYI emails: These emails are rolled up into a single digest which is sent once per week. Users can opt-out of receiving the digest by setting "Receive FYI digest" to “off”. However, at least one member of the Security Contact should continue to receive them. Some FYI emails are sent immediately, for example when a PD Application or one of its components is modified.

Notices about Access or Asset Requests. Others may submit a request in Socreg for:...

Security Contacts

Definition

A Security Contact is a group of authorized members who register IT Resources and receive security notices involving those resources.

The email address for a Security Contact should reach multiple people so that security incidents receive prompt attention. This can be accomplished by using a CalNet SPA, listserv,...

Socreg - Asset Registration Portal

Overview

Socreg is a self-service asset registration portal developed by the Information Security Office (ISO) to help campus departments and their Security Contacts maintain the registration of network assets and Protected Data, and to meet Policy requirements.

A Security Contact is a group of authorized members who register IT Resources and receive security notices involving those resources. UC Berkeley’s...